Fwd: Netcraft News - Tuesday March 29, 2011

0 views

Skip to first unread message

صادق‎

unread,

Mar 29, 2011, 10:39:43 PM3/29/11

to yazdlug

- Sadeq

---------- Forwarded message ----------
From: <anno...@lists.netcraft.com>
Date: 29 March 2011 16:50
Subject: Netcraft News - Tuesday March 29, 2011
To: sad...@gmail.com

Having trouble reading this email? Read online, Follow Us on Twitter, or Subscribe via RSS


Netcraft Services Phishing & Security Anti-Phishing Toolbar Phishing Site Feed Hosting Phishing Alerts Bank Fraud Detection Phishing Site Countermeasures Audited by Netcraft Open Redirect Detection Web Application Security Testing Web Application Security Course Internet Data Mining Hosting Provider Analysis Million Busiest Websites Hosting Provider Switching Analysis Hosting Provider Server Count Hosting Reseller Survey SSL Survey Internet Exploration Whats that site running? SearchDNS Sites on the Move Performance Hosting Prospects Performance Alerts Hosting Providers Network Performance Dedicated Server Monitoring Advertising Banner Advertising on Netcraft About Netcraft About Netcraft Jobs at Netcraft Fair Use, Copyright Site Privacy Statement Visiting Netcraft Contact Us Webmaster Article Categories Around the Net Dogfood Domains Hosting Interviews Netcraft Services Other Performance Security Web Server Survey Archives 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002	Comodo Hacker releases Mozilla certificate To prove responsibility for the recent security breach at a Comodo affiliate Registration Authority, the "Comodo Hacker" has uploaded the private key for the one of the fraudulently obtained SSL certificates. Netcraft has verified that the private key does correspond to the fraudulently issued SSL certificate for addons.mozilla.org. Only Comodo, the affiliate, or the hacker could have known this secret key. As the uploaded private key does not require a passphrase, it can readily be used by other attackers. Certificate revocation mechanisms have come under recent criticism for not working effectively, so the publication of the private key introduces a widespread risk of man-in-the-middle attacks against Mozilla Add-ons users. To get around the revocation problems, most web browser software has been updated to explicitly blacklist the bogus certificates. Users can therefore protect themselves by upgrading to the latest versions. Digg Slashdot Reddit StumbleUpon Delicious Technorati Posted by Paul Mutton on 29th March, 2011 in Security GlobalTrust websites offline after Comodo SSL breach Dozens of websites run by GlobalTrust remain offline following the recent security breach at a Comodo affiliate Registration Authority. Although Comodo did not name the compromised RA in its incident report, all of the fraudulently issued certificates refer to GTI Group Corporation in the organisational unit field. GlobalTrust is a division of this group, and has been issuing SSL certificates as a Comodo partner since 2006. Over the weekend, an individual purporting to have carried out the attack revealed on Pastebin.com that Comodo was hacked via InstantSSL.it. According to meta tags, this site was owned by GlobalTrust, but now bears a Comodo logo with a "site under construction" placeholder. Many other websites run by GlobalTrust have also been shut down and replaced with GlobalTrust-branded "under construction" pages, presumably while forensic investigations continue. Existing GlobalTrust customers may be affected by the temporary suspension of these sites; for instance, trust seals can no longer be served from https://trustseal.globaltrust.it because the site is no longer accepting any HTTPS connections. Netcraft's Web Server Survey highlights several other websites which currently display the GlobalTrust "under construction" page, including www.banksafe.it, www.comodogroup.it, www.cybercrimeworkingroup.org and, ironically, www.riskmitigation.it. GlobalTrust's founder, Massimo Penco, has also had his personal website replaced with the same GlobalTrust "site under construction" page. During a phone call with Netcraft last Thursday, Mr Penco denied that GlobalTrust was the unnamed RA cited in the original Comodo incident report. Digg Slashdot Reddit StumbleUpon Delicious Technorati Posted by Paul Mutton on 28th March, 2011 in Security
Copyright © Netcraft Ltd 2010. All Rights Reserved.